AccidentalGovernmentGovernmentMisconfigurationEmployee Data InvolvedGovernment IDIdentity (basic)EmploymentMediumResolved

Salinas Valley State Prison

bd_b4e9b0c983b16715 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 26, 2012

Filed

Nov 1, 2012

To disclose

5 weeks

Affected

Not disclosed

Confidence

65%

Full breach record for Salinas Valley State Prison →

On September 26, 2012, Salinas Valley State Prison discovered that a database file containing personal information for custody staff was accessible to all staff due to a misconfiguration. The data included names, Social Security numbers, phone numbers, addresses, and position information. The file was secured and relocated to a restricted server location. The organization is reviewing procedures to prevent recurrence.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 36 days

Sep 26, 2012

Begins

Sep 26, 2012

Discovered

Nov 1, 2012

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: California Department of Corrections and Rehabilitation
norm: california department of corrections and rehabilitation

Name: Salinas Valley State Prison
norm: salinas valley state prison
Industry: Governmentllm

Discovered: Sep 26, 2012
Breach occurred: Sep 26, 2012
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)Employment
Data elements: Social Security number
Attack vector: Misconfiguration

During the incident: Relocated database file to a more restricted location on the server to limit accessibility to a restricted security group
Changes made: Reviewing and revising procedures and practices to minimize the risk of recurrence
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(36 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-36873
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 1, 2012
Raw hash: c3c10492793d8afa3b4909bd2c21b9ad424035de84db49fac1a352c6f1e01279

Reporting entityCalifornia Department of Corrections and Rehabilitation

Victim entitySalinas Valley State Prison

Incidentdiscovered Sep 26, 2012

Stated responseRelocated database file to a more restricted location on the server to limit accessibility to a restricted security group

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov